CVE-2026-73455

CVE-2026-73455 is a High severity (CVSS 3.1: 7.5) denial-of-service vulnerability in the OSPFv3 agent on Arista EOS switches. Root cause is CWE-130 (Improper Handling of Length Parameter Inconsistency): a specially crafted packet sent remotely over the network can cause the OSPFv3 process to term...

CVE-2026-73442

CVE-2026-73442 affects Arista EOS with VRRP enabled. Peer device VRRP authentication credentials are logged in cleartext in agent trace logs, allowing an authenticated user with sufficient privileges (or a system receiving forwarded log output) to obtain those credentials without direct access to...

CVE-2026-73444

CVE-2026-73444 affects Arista EOS platforms running VRRPv2 with IP-AH authentication enabled. An unauthenticated attacker with access to the layer 2 network segment where VRRP operates can bypass VRRP authentication and claim the virtual router master role, enabling interception, modification, or...

CVE-2026-16648

CVE-2026-16648 has been reserved but no technical details are yet publicly available in the provided documents. The affected product, root cause, and impact remain unknown. Action: monitor for updates when the candidate is publicized.

CVE-2026-73461

Arista EOS is vulnerable to incorrect privilege assignment (CWE-266) in its OpenConfig gRPC request authorization . When AAA-based gRPC request authorization is enabled with mutual TLS, authenticated users' gRPC requests may be authorized at privilege level 0 instead of their assigned level, caus...

CVE-2026-84921

This CVE has been reserved but no technical details (affected product, root cause, or impact) are publicly available yet. Monitor for updates when the candidate is officially publicized.

CVE-2026-84914

CVE-2026-84914 is currently a reserved candidate with no public technical details. The description indicates it will be filled in when the security issue is officially announced. Monitor for updates as details become available.

CVE-2026-84916

The description for CVE-2026-84916 is currently a reserved placeholder with no public technical details provided. No connected documents offer additional information. Monitor for updates when the candidate is publicized.

CVE-2026-84920

CVE-2026-84920 has been reserved by an organization or individual, with no technical details publicly available yet. Monitor for updates when the candidate is publicized.

CVE-2026-73438

CVE-2026-73438 affects Arista EOS where an unauthenticated attacker on the same OSPFv3 broadcast domain can send crafted packets that trigger a Reachable Assertion (CWE-617), causing the Ospf3 agent to crash. This results in the loss of all OSPFv3 adjacencies and potential routing disruption acro...

CVE-2026-77190

Arista EOS is affected by a denial-of-service vulnerability in the Pimsm agent (CWE-20: Improper Input Validation). An unauthenticated network-adjacent attacker can send malformed PIM messages to a switch with PIM Sparse Mode and MLAG configured, causing the agent to terminate. Repeated attacks r...

CVE-2026-73467

CVE-2026-73467 affects Arista EOS , where TACACS+ shared secrets may be written in plaintext to log files when Tacacs trace level 6 is enabled on agent Aaa (CWE-532). Exploitation requires an attacker with authenticated local administrative access and the non-standard debugging trace explicitly e...

CVE-2026-84918

CVE-2026-84918 has been reserved but no technical details are yet publicly available. The vulnerability type, affected products, and impact remain unknown. Monitor for updates once the assigning organization publicizes the entry.

CVE-2026-73436

CVE-2026-73436 affects Arista EOS platforms running OSPFv2 with segment routing configured. A specially crafted OSPFv2 packet from an adjacent OSPF neighbor can cause the OSPF process to restart unexpectedly , leading to availability disruption (CVSS 3.1: 6.5 , AV:A/AC:L/PR:N/S:U/C:N/I:N/A:H). Ro...

CVE-2024-35585

Oxford Nanopore MinKNOW , a sequencing software used in nanopore-based genomic analysis, is vulnerable to weak authentication in versions before 24.06 . The application relies on a client's source IP address as its authentication mechanism, meaning an attacker who can spoof or originate traffic f...

CVE-2025-23029

CVE-2025-23029 is currently in reserved status with no public technical details about the affected product, root cause, or impact. Monitor for updates as the reserving organization publicizes the vulnerability.

CVE-2024-26225

CVE-2024-26225 is currently reserved with no public technical details available in the provided documents. Monitor for future updates when the candidate is officially publicized with full disclosure.

CVE-2026-84915

This CVE is currently reserved as a placeholder with no public technical details available regarding the affected product, root cause, or impact. Monitor for updates when the candidate is formally publicized.

CVE-2026-84919

This CVE entry is currently reserved and no technical details are publicly available in the provided documents. Affected products, root cause, and impact remain unspecified. Monitor for updates once the candidate is publicized.

CVE-2026-75944

CVE-2026-75944 is a race condition in Arista EOS during 802.1X supplicant re-authentication that may leave a stale ACL entry in the system. If the AclAgent process subsequently restarts, this stale entry can be applied to new supplicants, resulting in incorrect access control enforcement . The vu...

CVE-2026-73466

CVE-2026-73466 affects Arista EOS , where plaintext user passwords may be written to log files when PyServer trace level 4 is explicitly enabled on the Aaa agent (CWE-532: Insertion of Sensitive Information into Log File). Exploitation requires authenticated local administrative access plus non-s...

CVE-2025-46418

Westermo WeOS 5 (version 5.24 and later), an operating system deployed in industrial settings, is vulnerable to OS command injection through unsafe handling of media definitions . An attacker with administrative privileges can execute commands beyond their typical access rights, potentially compr...

CVE-2026-75943

CVE-2026-75943 is an incomplete cleanup (CWE-459) vulnerability in Arista EOS affecting deployments with 802.1X authentication and ACL-based authorization enabled. When an authenticated supplicant is removed via the clear dot1x host all CLI command or due to a supplicant timeout, a brief window o...

CVE-2026-19640

CVE-2026-19640 affects Arista EOS devices with the gNMI (gRPC Network Management Interface) / OpenConfig component configured with authorized requests. The root cause is incorrect authorization (CWE-863) : an authenticated user may receive incorrect authorization results, potentially allowing acc...

CVE-2026-19641

CVE-2026-19641 affects Arista EOS password authentication. Due to improper encoding or escaping (CWE-116) , a specially crafted password can create orphan authentication sessions that accumulate in EOS's internal session pool. Repeated exploitation exhausts this pool, preventing legitimate users ...

CVE-2026-81163

CVE-2026-81163 is a reserved candidate with no public technical details yet. The affected product, vulnerability type, and impact remain undisclosed. Action: monitor for updates once the reserving organization publicizes the entry.

CVE-2026-73463

CVE-2026-73463 is a race condition in the gNSI Authz service on Arista EOS that occurs when multiple gNSI transports are configured. A policy rotation may fail silently, allowing an authenticated user whose access was revoked by the new policy to retain unauthorized access to gRPC interfaces . Th...

CVE-2026-73456

CVE-2026-73456 is a critical code injection vulnerability (CWE-94, CVSSv3.1 10.0 ) in the gNPSI (gRPC Network Packet Sampling Interface) component of Arista EOS platforms. An unauthenticated gNPSI client can craft a malicious request to achieve arbitrary code execution , granting full administrat...

CVE-2026-2380

CVE-2026-2380 affects Arista EOS devices running OpenConfig-related services (gNMI , gNSI , RESTCONF , or NETCONF ). Sensitive requests and responses—such as CLI commands containing passwords or OpenConfig YANG leafs with secret keys—may be unintentionally logged by the OpenConfig/Octa agent to l...

CVE-2026-73446

CVE-2026-73446 affects Arista EOS platforms running IS-IS on a broadcast (LAN) interface. An unauthenticated attacker in the same Layer 2 domain can send a crafted IS-IS Hello PDU that causes the device to tear down an established IS-IS adjacency, resulting in traffic disruption and loss of IP re...

CVE-2026-73459

CVE-2026-73459 affects Arista EOS with IS-IS configured. An unauthenticated attacker in the same Layer 2 domain can inject a specially crafted IS-IS LSP PDU that causes a legitimate LSP to be purged from the link-state database due to improper validation of the integrity check value (CWE-354), po...

CVE-2026-84910

CVE-2026-84910 is currently in reserved status with no public technical details available. The vulnerability type, affected products, and impact are not yet disclosed. Monitor for future updates when the assignee publishes the full description.

CVE-2026-73458

CVE-2026-73458 affects Arista EOS where Bidirectional Forwarding Detection (BFD) sessions are configured with authentication (Password, Keyed MD5, Meticulous MD5, Keyed SHA1, or Meticulous SHA1). The root cause is classified as CWE-303 (Incorrect Implementation of Authentication Algorithm) . A sp...

CVE-2026-86108

CVE-2026-86108 is an OS Command Injection (CWE-78) in Arista VeloCloud Edge (formerly VeloCloud Edge by Broadcom). Insufficient validation of inputs supplied through management and configuration workflows may allow an authorized request or configuration value to be interpreted as an operating-sys...

CVE-2026-73450

CVE-2026-73450 affects Arista EOS in the MLAG Dual Primary Detection component (CWE-345: Insufficient Verification of Data Authenticity). An unauthenticated attacker with access to the dual-primary detection network segment can send crafted UDP heartbeat packets that, if present when the MLAG pri...

CVE-2026-73462

CVE-2026-73462 affects Arista EOS running IGMP snooping (enabled by default on all VLANs). A network-adjacent, unauthenticated attacker can send malformed packets to trigger an out-of-bounds read (CWE-125) in the IGMP snooping agent, causing it to terminate and flood multicast traffic to all port...

CVE-2026-73454

CVE-2026-73454 is a command injection (CWE-77) vulnerability in Arista EOS affecting the gNSI Credentialz service (part of OpenConfig). A specially crafted request can cause unintended modifications to a target account's properties, potentially granting elevated privileges or access beyond what a...

CVE-2026-73468

Arista EOS running PIM Sparse Mode is vulnerable to a specially crafted packet that causes premature expiry of multicast forwarding state on affected interfaces, leading to temporary loss of multicast traffic forwarding . The root cause is classified as CWE-670 (Always-Incorrect Control Flow Impl...

CVE-2026-73465

CVE-2026-73465 is a CWE-532 (Insertion of Sensitive Information into Log File) vulnerability in Arista EOS , where plaintext private keys may be written to log files under specific conditions. Exploitation requires authenticated local administrative access and MgmtSecuritySslCertKey trace levels ...

CVE-2026-86109

VeloCloud Edge (formerly VeloCloud Edge by Broadcom) is affected by an improper verification of cryptographic signature (CWE-347) in its software update workflow. The workflow does not restrict the digest algorithm used for artifact verification, allowing an attacker with sufficient privileges to...

CVE-2026-86107

CVE-2026-86107 is an out-of-bounds write (CWE-787) in the VCMP tunnel protocol on Arista VeloCloud Edge and VeloCloud Gateway (formerly VeloCloud by Broadcom). The flaw occurs when processing tunneled IP fragments between authenticated overlay neighbors. A successful exploit causes the affected p...

CVE-2026-73435

CVE-2026-73435 affects Arista EOS where OSPFv2 with cryptographic authentication (MD5 or SHA) is configured on a broadcast interface with at least two neighbors. An unauthenticated attacker on the same broadcast segment can send a specially crafted OSPFv2 packet, causing adjacency flapping and pa...

CVE-2026-73453

CVE-2026-73453 is a critical code injection vulnerability (CWE-94) in Arista EOS P4Runtime service, scored CVSS 3.1: 10.0 . An unauthenticated P4Runtime client can achieve arbitrary code execution and complete administrative control over an affected switch by crafting a malicious packet during se...

CVE-2026-84923

CVE-2026-84923 has been reserved but no technical details are yet publicly available in the provided documents. Affected products, root cause, and impact remain unknown. Monitor for updates as the reserving organization publishes details.

CVE-2026-77191

CVE-2026-77191 affects Arista EOS deployments with 802.1X configured in authenticator mode and per-supplicant ACL-based authorization. An authenticated supplicant on an adjacent network segment may send traffic without the intended ACL applied during a brief window (milliseconds to seconds) betwe...

CVE-2026-84917

CVE-2026-84917 is currently in a reserved state. No technical details about affected products, root cause, or impact are publicly available in the provided documents. Monitor for updates once the candidate is publicized.

CVE-2026-84913

This CVE is currently reserved with no public technical details available in the provided documents. The vulnerability description, affected products, and impact remain unknown. Monitor for updates as details are expected once the vendor publicizes the issue.

CVE-2026-84911

CVE-2026-84911 has been reserved by an organization or individual and no technical details are yet publicly available. Monitor for updates when the candidate is publicized.

CVE-2026-73439

CVE-2026-73439 is a High severity (CVSS 7.5) vulnerability in Arista EOS affecting the OpenConfig gNMI component. When gNSI Pathz is configured with a policy containing both a group rule and a user rule for the same path, gNMI may fail to correctly enforce those rules, allowing an authenticated u...

CVE-2026-73460

CVE-2026-73460 affects Arista EOS devices running IS-IS graceful restart . An unauthenticated attacker in the same Layer 2 domain can inject a malformed IS-IS LSP PDU to terminate the graceful restart procedure prematurely, resulting in traffic loss following a restart event. The weakness is clas...